Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/Pzh7qAYERuQLEUX-HiRWfV_CDT0.roa
File: Pzh7qAYERuQLEUX-HiRWfV_CDT0.roa (raw, json)
Hash identifier: J11TPe0UV1NhOunkCLh7xFC1pPA8MMkPGCRVl2AAiP8=
Subject key identifier: 3F:38:7B:A8:06:04:46:E4:0B:11:45:FE:1E:24:56:7D:5F:C2:0D:3D
Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial: 01857321CFE0EE17587A3B55A7359AFFA368
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/Pzh7qAYERuQLEUX-HiRWfV_CDT0.roa
Signing time: Mon 02 Jan 2023 15:37:53 +0000
ROA not before: Mon 02 Jan 2023 15:37:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202496
IP address blocks: 185.19.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:cf:e0:ee:17:58:7a:3b:55:a7:35:9a:ff:a3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
Validity
Not Before: Jan 2 15:37:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f387ba8060446e40b1145fe1e24567d5fc20d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:fe:92:7f:9a:2b:c5:a1:8f:5a:aa:57:57:
1f:ce:1e:de:b6:56:81:27:04:f6:e2:50:63:9c:39:
b2:5d:bb:d3:f0:ad:f6:10:f2:ea:69:11:02:90:2c:
f3:3e:b8:ec:ce:06:11:98:a4:9b:4c:57:a4:fa:57:
c9:ea:ea:95:a0:fe:b4:1b:db:e7:10:e3:b3:56:b1:
ce:24:5a:8e:c3:94:52:17:4d:aa:11:8c:d0:cc:63:
a7:99:64:e1:83:a4:22:5d:ad:2d:59:bf:8a:14:70:
33:97:ee:de:68:7e:69:39:f9:40:00:22:78:20:d3:
a8:59:32:a8:d4:a9:58:32:ce:12:b2:2a:58:e6:11:
27:81:b1:9a:5a:69:f2:0f:aa:57:3e:45:2b:07:91:
6f:3f:8d:d9:5a:71:01:1d:42:a3:83:70:c9:78:37:
36:13:85:44:54:c4:30:d3:5b:22:d6:93:76:f2:04:
3e:30:5f:1a:d4:d4:30:7c:75:c4:05:db:46:0b:70:
b1:85:16:08:c9:25:cb:6d:56:7c:d7:97:9e:b2:77:
3e:c7:61:11:bf:2f:bf:47:2f:f0:47:a4:4a:81:b8:
46:4b:d4:62:21:62:db:dc:38:9a:d9:c9:0d:5a:cf:
43:48:cf:b4:dc:55:f1:c3:3e:dc:2d:b6:7e:bc:2f:
d4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:38:7B:A8:06:04:46:E4:0B:11:45:FE:1E:24:56:7D:5F:C2:0D:3D
X509v3 Authority Key Identifier:
keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/Pzh7qAYERuQLEUX-HiRWfV_CDT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:3a:d2:4a:10:ed:90:cc:76:a0:c8:5f:05:c1:5b:08:30:63:
7f:12:bb:96:1f:25:9a:ff:63:f5:e9:c2:3a:cf:30:42:8d:6c:
88:49:41:92:04:31:fc:ec:b4:fd:84:4e:e1:f9:6e:52:cd:f6:
e2:ab:76:0f:38:40:db:98:9d:cb:47:8e:31:bd:ea:18:57:e7:
1d:1f:b5:ac:78:97:b9:ba:27:9f:70:b3:0c:cf:1f:26:60:fd:
9c:5f:c2:20:b7:d5:e1:af:ed:ae:91:59:e0:f1:3f:de:8e:79:
ed:3a:9e:4d:fa:ec:4b:4c:80:3b:a4:33:42:46:19:5b:a6:db:
5a:8e:3c:1e:bf:e9:c5:a9:79:47:55:e2:da:cf:2d:a9:3b:47:
65:a2:0c:d1:5f:0d:21:30:5f:13:7b:81:54:9b:d4:1e:17:47:
97:bb:9f:3d:0d:36:df:b1:8b:13:6e:2f:dd:5a:1c:e9:94:66:
ce:74:42:7c:ae:39:99:ba:eb:85:de:41:23:9e:9d:4e:cc:88:
b7:35:42:2a:b1:8f:7c:3d:1e:00:0a:21:8e:96:59:30:c7:4f:
b1:54:c8:89:3c:db:76:a0:40:26:b4:c6:1e:20:22:62:a2:ef:
ec:9d:48:90:cf:03:7f:4d:8a:eb:55:39:43:7a:08:73:81:f1:
b7:94:1e:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzIc/g7hdYejtVpzWa/6NoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDUzNTU0YzgxODY3NGNkNTQ2Yjc5OWRkNDQ3ODVhNTY0
YzU2Y2IwHhcNMjMwMTAyMTUzNzUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjM4N2JhODA2MDQ0NmU0MGIxMTQ1ZmUxZTI0NTY3ZDVmYzIwZDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/T+kn+aK8Whj1qqV1cfzh7etlaB
JwT24lBjnDmyXbvT8K32EPLqaRECkCzzPrjszgYRmKSbTFek+lfJ6uqVoP60G9vn
EOOzVrHOJFqOw5RSF02qEYzQzGOnmWThg6QiXa0tWb+KFHAzl+7eaH5pOflAACJ4
INOoWTKo1KlYMs4SsipY5hEngbGaWmnyD6pXPkUrB5FvP43ZWnEBHUKjg3DJeDc2
E4VEVMQw01si1pN28gQ+MF8a1NQwfHXEBdtGC3CxhRYIySXLbVZ815eesnc+x2ER
vy+/Ry/wR6RKgbhGS9RiIWLb3Dia2ckNWs9DSM+03FXxwz7cLbZ+vC/U+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD84e6gGBEbkCxFF/h4kVn1fwg09MB8GA1UdIwQY
MBaAFAwFNVTIGGdM1Ua3md1EeFpWTFbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEt
YmY5Yzc5MTQ5NDYyLzEvUHpoN3FBWUVSdVFMRVVYLUhpUldmVl9DRFQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEtYmY5Yzc5MTQ5NDYy
LzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRPIMA0G
CSqGSIb3DQEBCwUAA4IBAQCiOtJKEO2QzHagyF8FwVsIMGN/EruWHyWa/2P16cI6
zzBCjWyISUGSBDH87LT9hE7h+W5Szfbiq3YPOEDbmJ3LR44xveoYV+cdH7WseJe5
uiefcLMMzx8mYP2cX8Igt9Xhr+2ukVng8T/ejnntOp5N+uxLTIA7pDNCRhlbptta
jjwev+nFqXlHVeLazy2pO0dlogzRXw0hMF8Te4FUm9QeF0eXu589DTbfsYsTbi/d
WhzplGbOdEJ8rjmZuuuF3kEjnp1OzIi3NUIqsY98PR4ACiGOllkwx0+xVMiJPNt2
oEAmtMYeICJiou/snUiQzwN/TYrrVTlDeghzgfG3lB5p
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:19 2024 by rpki-client on console-fra.rpki-client.org